Configure domain group for the PI AF Application Service

When you run the PI AF SQL Server database in a mirrored SQL Server session or a failover cluster, we recommend that you run the PI AF Application Service under a domain user account that belongs to a domain group. This domain user group is used to create a SQL Server login account that is assigned specific roles within the PI AF SQL Server databases.

You must have permissions that allow you to create or configure a domain user group. That is, you must be a member of the Account Operators group, the Domain Admins group, or the Enterprise Admins group in Microsoft Windows Active Directory, or you must be delegated by the appropriate authority.

You may want to consult your organization's IT department before attempting to create or configure a domain user group. For additional assistance, visit the Customer Portal.

1. Open the Active Directory Users and Computers utility and connect to the domain that contains the PI AF Application Service account:

   1. Open a command window.

   2. Type dsa.msc.

   3. Click OK.

2. Right-click the Users node in the left pane, and select New Group.

3. In the Group name field, enter a name, such as AFServers.

4. Set the Group Scope to Global.

5. Set the Group Type to Security.

6. Click OK to create the domain group.

7. Right-click the newly created group (such as AFServers) and select Properties.

8. Select the Members tab and click Add.

9. In the Enter the object names to select field, enter the name of the domain user under which the PI AF Application Service runs.

10. Click OK.

11. Close the Active Directory Users and Computers utility.